Skip to content

Backport of docs/oracle: add wallet permissions example into stable-website #13928

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hc-github-team-secure-vault-core merged 2 commits into from
Feb 7, 2022
Merged

Backport of docs/oracle: add wallet permissions example into stable-website #13928

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c8fe4bc
backport of commit d573a9d96df654fea7b5eee9291b47275662d293
jasonodonnell Feb 7, 2022
04fcc29
backport of commit dbb79986ee8b635ba6dba5818db7cc9dfae3e815
jasonodonnell Feb 7, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 15 additions & 3 deletions website/content/docs/secrets/databases/oracle.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,9 +106,6 @@ pluggable databases rather than the container database in the `connection_url` f

### Connect Using SSL

~> **Note**: The wallets used when connecting via SSL should be available on every Vault
server when using high availability clusters.

If the Oracle server Vault is trying to connect to uses an SSL listener, the database
plugin will require additional configuration using the `connection_url` parameter:

Expand All @@ -133,6 +130,21 @@ vault write database/config/oracle \
password="password"
```

#### Wallet Permissions

~> **Note**: The wallets used when connecting via SSL should be available on every Vault
server when using high availability clusters.

The wallet used by Vault should be in a well known location with the proper filesystem permissions. For example, if Vault is running as the `vault` user,
the wallet directory may be setup as follows:

```shell
mkdir -p /etc/vault/wallets
cp cwallet.sso /etc/vault/wallets/cwallet.sso
chown -R vault:vault /etc/vault
chmod 600 /etc/vault/wallets/cwallet.sso
```

### Using TNS Names

~> **Note**: The `tnsnames.ora` file and environment variable used when connecting via SSL should
Expand Down